CVE-2024-52538

Summary

CVE-2024-52538 is a newly disclosed SQL injection vulnerability affecting Dell Avamar, versions 19.x. An attacker with remote access, even of a low privileged nature, could potentially exploit this issue by injecting malicious SQL commands. This could result in the execution of unwanted scripts within the system, posing a significant security risk. The vulnerability arises due to insufficient input validation in the software's SQL command processing. Dell has been notified and is expected to release a patch to resolve this issue. Until then, users are strongly advised to apply mitigation strategies and closely monitor their systems for any suspicious activity.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.